Contact us

Business security software

Licences for the security tools UK organisations actually run: endpoint protection, email security, identity, network access, filtering and staff training, bought and managed in one place.

Contact us

In short: Business security software is the set of subscriptions that protect your devices, email, identities, network and people. Most UK organisations need several layers, licensed per user or per device on monthly or annual terms. Forever Systems supplies them from one account, helps you pick the right edition and manages changes and renewals.

What counts as business security software

Security software covers every subscription you buy to stop attacks, limit the damage when one gets through, and prove to insurers, customers and auditors that you take security seriously. For most UK organisations it breaks down into a handful of layers:

No single product covers all of these well, which is why most businesses end up with subscriptions from several vendors.

Security software: vendors and products we supply

  • 1Password: Encrypted business password manager, billed monthly per user with no minimum.
  • 1Password Business: Shared vaults, SSO unlock, provisioning and reporting, licensed per user.
  • Absolute Security: Firmware-anchored device visibility, control and self-healing resilience.
  • Absolute Security Secure Endpoint: Visibility, Control and Resilience editions compared, with Persistence.
  • Actifile: Sensitive data discovery, risk scoring and automatic file encryption.
  • Actifile Dynamic Data Security: Discovery, risk scoring, monitoring and automatic encryption in one platform.
  • Addigy: Cloud Apple device management for Mac, iPhone and iPad, licensed per device.
  • Addigy Apple MDM: Enrol, configure, patch and support Macs, iPhones and iPads from one console.
  • Bitdefender: GravityZone endpoint protection, EDR, email security, patching and encryption from one console.
  • Bitdefender Extended Email Security: MX gateway and Microsoft 365 API email protection with post-delivery remediation.
  • Bitdefender Full Disk Encryption: Central management of native Windows and macOS encryption, with recovery keys and reports.
  • Bitdefender GravityZone Cloud MSP Security: Cloud-managed endpoint protection for PCs, Macs, Linux and servers, billed monthly.
  • Bitdefender GravityZone EDR: Incident correlation, attack visualisation and guided response, with XDR and MDR options.
  • Bitdefender Patch Management: Automated OS and third-party application patching from the GravityZone console.
  • Blackpoint Cyber: CompassOne platform with 24/7 endpoint MDR and identity ITDR from a human-led SOC.
  • Blackpoint Cyber CompassOne: Essentials, Core and Standard packages: MDR and ITDR plus posture, vulnerability and SIEM.
  • Blackpoint Cyber ITDR: 24/7 identity detection and response for Microsoft 365, Google Workspace and Cisco Duo.
  • Blackpoint Cyber MDR: 24/7 endpoint detection and active response, with Microsoft Defender integration.
  • Breach Secure Now: Micro-training, phishing simulations, dark web monitoring and policy sign-off, run for you.
  • Breach Secure Now Breach Prevention Platform: Weekly micro-training, phishing tests, dark web checks and policies, per seat.
  • Breach Secure Now Dark Web Monitoring: Continuous dark web alerts for your domains, sold in blocks of ten domains.
  • Breach Secure Now HIPAA compliance: HIPAA risk assessment, training and policies for UK firms with US health data.
  • Check Point: Endpoint, email, SASE, mobile, browser, WAF and MDR licences in one Check Point Portal tenant.
  • Check Point Infinity: One Check Point Portal tenant and subscription for every Check Point service you use.
  • CrowdStrike: Falcon endpoint protection, managed threat hunting, Falcon Complete MDR, identity, SIEM and AI security.
  • CyberFOX: AutoElevate privileged access management: remove admin rights without slowing people down.
  • CyberFOX AutoElevate: Remove local admin rights, with rule and mobile app approvals and attack tool blocking.
  • Cynet: One-agent security platform with EDR, XDR, deception and 24x7 CyOps MDR, licensed per endpoint.
  • Cynet All-in-One platform: Protect, Elite and All-in-One packages compared, licensed per endpoint.
  • Cynet CyOps MDR: Cynet's 24x7 analyst team, included with Elite and All-in-One, plus Platinum Care.
  • Cynet SIEM: Log collection, search, correlation and long-term retention inside the Cynet console.
  • DefensX: Browser security with DNS protection, phishing and credential defence, AI data controls and ZTNA.
  • DefensX Browser security: Core, Core Plus, Premium and Premium+ editions compared, licensed per user.
  • DefensX Nexi AI: AI agent that turns browser activity into reports on productivity, AI use and risk.
  • DNSFilter: Cloud DNS security and content filtering for offices, schools and remote workers.
  • DNSFilter Core and Plus plans: Core and Plus compared, what replaced Pro, add-ons and deployment.
  • Domotz: Network discovery, monitoring, alerts and remote management for your own sites.
  • Domotz Network monitoring: Discover, map, monitor and remotely manage every device on your networks.
  • EasyDMARC: Managed DMARC, SPF, DKIM, BIMI and MTA-STS, licensed per domain.
  • EasyDMARC EasySPF: Managed SPF that stays under the 10 lookup limit as your senders change.
  • EasyDMARC Managed BIMI: Your logo in supporting inboxes, with the BIMI record and assets hosted for you.
  • EasyDMARC Managed DMARC: Hosted DMARC record, readable reports and a managed path to p=reject.
  • Echoworx: Policy-based email encryption with portal, TLS, PDF and S/MIME or PGP delivery.
  • Echoworx Email Encryption: Standard and Advanced editions compared, licensed per user, monthly or annual.
  • Exium: SASE, software firewall, XDR and identity on one platform, licensed per user.
  • Guardz: Managed identity, email, endpoint and awareness security for small businesses, with 24/7 MDR.
  • Guardz Managed security plans: Pro, Ultimate and Elite plans compared, run for you and licensed per user.
  • Guardz MDR: 24/7 detection and response for endpoints and identities, on Ultimate and Elite.
  • HacWare: Automated AI phishing simulations and micro training, per user, monthly or annual.
  • HacWare Security awareness training: Pro, Pro + LMS and Plus + SMS: AI phishing tests, micro training, LMS and SMS phishing.
  • Halcyon: Dedicated anti-ransomware beside your EDR: prevention, key capture and data theft blocking.
  • Halcyon Anti-Ransomware Platform: Pro and Pro Plus DXP: prevention, key capture, recovery and data theft blocking.
  • Horizon3.ai: NodeZero autonomous penetration testing for networks, cloud and Active Directory, per asset.
  • Horizon3.ai NodeZero Core: Continuous, unlimited autonomous pentesting, scheduled and run for you, per asset.
  • Horizon3.ai NodeZero Flex: On-demand autonomous pentests of networks, cloud and Entra ID, per asset tested.
  • Hornetsecurity: Microsoft 365 email security, archiving, backup and compliance, per user.
  • Hornetsecurity 365 Permission Manager: Control sharing permissions in SharePoint, OneDrive and Teams.
  • Keeper Security: Zero-knowledge business password manager and KeeperPAM privileged access, licensed per user.
  • Keeper Security Endpoint Privilege Manager: Remove local admin rights with just-in-time elevation on Windows, macOS and Linux.
  • Keeper Security KeeperPAM: Privileged sessions, rotation, recording and discovery, licensed per admin user.
  • Keeper Security Password Manager: Business Starter, Business and Enterprise vaults with BreachWatch, reporting and compliance add-ons.
  • Keeper Security Secrets Manager: Machine and DevOps secrets out of code and into the vault, with SDKs and CI/CD integrations.
  • Netwrix: 1Secure data and identity security, Netwrix Auditor and PingCastle AD assessments.
  • Netwrix 1Secure: SaaS data security posture management, identity risk and auditing, per user.
  • Netwrix Auditor: On-premises change and access auditing with compliance reports.
  • Nord Security: NordLayer network access, NordPass password management and NordStellar threat exposure monitoring.
  • Nord Security NordLayer: Business VPN, ZTNA, cloud firewall and DNS filtering, licensed per user with no hardware.
  • Nord Security NordPass: Encrypted business password manager with sharing, policies and breach alerts, licensed per user.
  • Nord Security NordStellar: Dark web, data breach and attack surface monitoring, sized by monitored domains and assets.
  • Perception Point: Email, browser and Microsoft 365 collaboration security with managed incident response.
  • Proofpoint: Proofpoint Essentials email security, archiving and awareness training, per user.
  • Sectigo: Automated public TLS certificates, standard and wildcard, through Sectigo Certificate Manager.
  • Sectigo Certificate Manager: Automated DV and wildcard TLS certificates with discovery, ACME renewal and expiry alerts.
  • SentinelOne: Singularity endpoint, cloud and identity security with Purple AI and managed detection and response.
  • SentinelOne Prompt Security: Shadow AI discovery and data protection for staff and AI code assistants.
  • Sophos: Endpoint, EDR, XDR, MDR, firewall, email and mobile security licences, managed in Sophos Central.
  • Symantec: Email Safeguard.cloud: cloud email filtering for spam, malware and phishing, per user.
  • Symantec Email Safeguard.cloud: Cloud email gateway: spam, malware, phishing and BEC filtering with content and image control.
  • ThreatDown: Malwarebytes business security: endpoint protection, EDR, MDR, patching and more, billed monthly.
  • ThreatDown DNS Filtering: Block malicious and unwanted web categories at DNS level, managed with your endpoints.
  • ThreatDown EDR: Detection and response with isolation and ransomware rollback, per endpoint, monthly.
  • ThreatDown Email Security: AI phishing detection and auto-remediation for cloud mailboxes, no MX changes, per mailbox.
  • ThreatDown Endpoint Protection: Next-gen antivirus for PCs, Macs, Linux and servers, with application block, billed monthly.
  • ThreatDown ITDR: Detect and stop identity attacks on Active Directory, Entra ID and Okta, per user.
  • ThreatDown MDR: 24/7 monitoring and response by ThreatDown analysts, or managed threat hunting, monthly.
  • ThreatDown Mobile Security: Protection for Chromebooks, iOS and Android from harmful sites and apps, per device.
  • ThreatDown OneView: Multi-tenant console for every ThreatDown module, billed monthly per endpoint.
  • ThreatDown Vulnerability and Patch Management: Find vulnerable software, rank it by CVSS and deploy patches from one console, per endpoint.
  • Timus Networks: Timus SASE: zero trust access, cloud firewall and web filtering in one per-user subscription.
  • Timus Networks Timus SASE: Zero trust access, always-on agent, cloud firewall and web filtering, licensed per user.
  • Todyl: Modular SASE, EDR, SIEM, 24/7 MXDR and GRC on one agent, billed monthly per device.
  • Todyl GRC: Compliance mapping, assessments and readiness dashboards, licensed per device.
  • Trend Micro: TrendAI Vision One endpoint, email, XDR and ZTSA, plus Worry-Free for smaller businesses.
  • Trend Micro Cloud Security: Container Security and File Security for Kubernetes, serverless and cloud storage.
  • Trend Micro Vision One platform: The platform and TrendAI Flex licensing model behind every Vision One solution.
  • TruGrid: Zero trust remote desktop access and BitLocker management for Windows.
  • TruGrid SecureRDP: Zero trust RDP to PCs, RDS and virtual desktops with MFA and no open ports.
  • usecure: Automated awareness training, phishing simulation, policies and breach monitoring.
  • usecure Human risk management: Training, phishing, policies and breach monitoring in one per-user plan.
  • Vade: AI email security for Microsoft 365 with no MX change and post-delivery removal.
  • Vade for M365: AI anti-phishing and malware protection for Microsoft 365, no MX change.
  • Valimail: Automated DMARC, SPF and DKIM per domain, with BIMI and MTA-STS in Pro.
  • WatchGuard: Firebox firewalls, endpoint security, MDR, AuthPoint MFA and FireCloud SASE.
  • Webroot: Lightweight cloud endpoint protection, DNS filtering and awareness training.
  • Zero Networks: Agentless microsegmentation, identity segmentation and secure remote access.

What to look for

Start from the risks you actually face rather than a feature list. For most UK businesses the main threats are phishing, stolen passwords, ransomware and mistakes such as sending data to the wrong person. A sensible stack deals with those first.

When comparing products, look at:

  • Management: one cloud console for all your sites and devices saves hours every month
  • Coverage: Windows, macOS, Linux, iOS, Android, servers and cloud mailboxes, as relevant to you
  • Detection and response: does the tool just block, or can it investigate and roll back? Is there a 24/7 managed option if you have no security team?
  • Integration: does it work with Microsoft 365 or Google Workspace, your identity provider and your other tools?
  • Evidence: reports that help with Cyber Essentials, cyber insurance questionnaires and UK GDPR accountability

How security software is licensed

Most security products are sold as subscriptions. Endpoint and EDR tools are normally licensed per device or per user (a user licence often covers several devices). Email security, awareness training and password managers are usually per user or per mailbox. Firewalls combine an appliance with a security subscription, and SASE products are typically per user with optional bandwidth or site add-ons.

Terms vary by vendor. Some offer month-to-month billing, some only annual or multi-year terms, and some bill monthly in arrears based on what you used. Our guide to monthly vs annual licences explains the trade-offs, and per-user vs per-device licensing helps you count what you need.

How to choose a security stack

  1. List what you have: current products, renewal dates, user and device counts. Overlap is common, for example two products both filtering email.
  2. Map against the basics: the five Cyber Essentials controls (firewalls, secure configuration, user access control, malware protection and security update management) are a good minimum.
  3. Fill the gaps in order of risk: usually email security, MFA, endpoint protection with EDR, and backup come first.
  4. Decide who watches the alerts: if nobody on your team can respond at 2am, a managed detection and response service is worth considering.
  5. Align renewal dates so that next year you review the whole stack at once.

For managed security services rather than licences, see Forever Group's cyber security services and our specialist Cloud Security site.

How we help

Forever Systems supplies security subscriptions from many leading vendors on one account. We help you choose the right edition, avoid paying twice for overlapping features, and keep user and device counts accurate as your team changes. Our engineers can deploy and support the products too. Prices depend on vendor, quantity and term: contact us and ask us for a quote.

Explore Security software

Endpoint protectionNext-generation antivirus for laptops, desktops and servers.EDR, XDR and MDRDetection and response, with optional 24/7 managed services.Anti-ransomwareStop ransomware encrypting files, and recover if it does.Email securityStop phishing, malware and impersonation in Microsoft 365 and Google Workspace.DMARC and email authenticationGet SPF, DKIM and DMARC to enforcement and stop domain spoofing.Email encryptionSend sensitive information securely from Microsoft 365 or Google Workspace.Password managersEncrypted vaults, safe sharing and central control for passwords.Identity, MFA and privileged accessMFA, single sign-on and control of admin rights.SASE, ZTNA and business VPNSecure access to apps and the internet for hybrid teams.DNS and web filteringBlock malicious and unsuitable websites on any network.Secure enterprise browsersSecurity and data controls built into the browser.Firewalls and network securityFirewall security subscriptions, support and renewals.Mobile security and device managementProtect and manage iOS and Android phones and tablets.Security awareness trainingTraining and phishing simulations that change staff behaviour.Vulnerability management and pen testingFind, prioritise and fix weaknesses before attackers do.Threat exposure and dark web monitoringFind leaked credentials, lookalike domains and exposed assets.Device visibility and recoveryTrack, freeze and repair devices wherever they are.Certificate managementTrack and automate SSL/TLS certificate renewals.

How Forever Systems supplies your software licences

Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.

  • The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
  • Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
  • Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
  • Deployment and support from engineers who run these products every day, not just a reseller account
  • Consolidated billing and renewal reminders so nothing lapses unexpectedly

We work with businesses, schools, charities and public sector organisations of all sizes.

Need a licence quote or a second opinion on your renewal?

Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.

Contact us

Frequently asked questions

What security software does a small business need?

At minimum: email security, multi-factor authentication, endpoint protection on every device, a password manager and reliable backup. Add security awareness training and DNS filtering next. The Cyber Essentials controls are a good checklist.

Is the antivirus built into Windows enough for a business?

Microsoft Defender Antivirus is a reasonable baseline, but business products add central management, reporting, EDR, web and device control and, in many cases, a managed response service. Which you need depends on your risk and resources.

Can I buy security software from several vendors on one invoice?

Yes. We supply subscriptions from many security vendors through one account, with one monthly invoice and one renewal calendar.

Do you sell Microsoft security licences?

Not on this site. Microsoft licensing, including Microsoft 365 security add-ons, is handled by Forever Group: see Microsoft licensing.

Licensing guidePlain-English guides to buying, counting and renewing business software licences.Why buy through ForeverOne account, one invoice and engineers who know the products.Backup softwareCloud app, server, endpoint and disaster recovery backup.Productivity softwareGoogle Workspace, PDF, e-signature, file sharing, print and remote access.Vendors A-ZEvery software vendor we license, A to Z.

Related from Forever Group